The iNode client software and iMC server are recommended to ensure the normal operation of the
online user handshake security function.
Once enabled with the 802.1X multicast trigger function, a port sends multicast trigger messages to
the client periodically to initiate authentication.
For a user-side device sending untagged traffic, the voice VLAN function and 802.1X are mutually
exclusive and cannot be configured together on the same port. For details about voice VLAN, refer
to VLAN Configuration in the Access Volume.
Configuring an 802.1X Guest VLAN
The guest VLAN function and the free IP function in EAD fast deployment are mutually exclusive on
If the traffic from a user-side device carries VLAN tags and the 802.1X authentication and guest
VLAN functions are configured on the access port, you are recommended to configure different
VLAN IDs for the voice VLAN, default VLAN of the port, and 802.1X guest VLAN. This is to ensure
the normal use of the functions.
Create the VLAN to be specified as the guest VLAN.
To configure a port-based guest VLAN, make sure that the port access control method is
portbased, and the 802.1X multicast trigger function is enabled.
Follow these steps to configure a port-based guest VLAN:
Enter system view
guest VLAN for
specified or all
Different ports can be configured with different guest VLANs, but a port can be configured with only one
Use the command...
dot1x guest-vlan guest-vlan-id
In system view
[ interface interface-list ]
dot1x guest-vlan vlan-id
Use either approach.
By default, a port is configured with
no guest VLAN.